"By happy coincidence I received my new V****n router on Saturday. I was surprised to see that the username and password was available in five places"
It is pretty shitty physical security. But the vast majority of people are computer illiterate and are never going to change the password anyway. If we have to sacrifice physical security to stop the far more plausible threat of attacks via the Internet, then I think it's a good compromise.